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REMARKS 



A Petition extending the period for response for three months, to July 23, 2008, is being filed 
separately, but concurrently herewith. 

In the Office Action, the Examiner indicated that claims 1 through 21 are pending in the 
application and the Examiner rejected all claims. 

Claim Rejections, 35 U.S.C. §101 

Onpage3 ofthe Office Action, the Examiner rejected claims 8-14 under 35 U.S.C. §101 as 
being directed to non-statutory subject matter. In response, applicant has amended claim 8 to include 
a processor configured to analyze one or more software solutions by a plurality of agents. In light of 
this amendment, the Examiner is respectfully requested to reconsider and withdraw the rejections of 
claims 8-14 under 35 U.S.C. §101. 

Claim Rejections, 35 U.S.C. § 103 

On page 4 of the Office Action, the Examiner rejected independent claims 1 , 8 and 1 5 under 
35 U.S.C. §103(a) as being anticipated by U.S. Patent Application Publication No. 2003/0233581 to 
Reshef et al. ("Reshef) in view of U.S. Patent No. 6,654,783 to Hubbard. On page 7 ofthe Office 
Action, the Examiner rejected claims 2, 9and 16 under 35 U.S.C. §103(a)as being unpatentable over 
Reshef in view of Hubbard, and further in view of Applicants' admitted prior art (AAPA). On page 
8 ofthe Office Action, the Examiner rejected claim 3-5, 1 0-12 and 17-20 under 35 U.S.C. §103(a) as 
being unpatentable over Reshef in view of Hubbard, and further in view of U.S. Patent Application 
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Publication No. 2004/0064722 to Neeley et al. ("Neeley"). On page 1 1 of the Office Action, the 
Examiner rejected claims 7, 14 and 21 under 35 U.S.C. §103(a) as being unpatentable over Reshef in 
view of Hubbard, and further in view of U.S. Patent Application Publication 2003/0236994 to Cedar 
et al ("Cedar"). 

The Present Invention 

The present invention teaches a method and system for the automatic detection and correction of 
security vulnerabilities in both individual software components and across complex, multi- 
component software solutions. The present invention utilizes a plurality of vulnerability analysis 
and fortification tool (VAF) agents to analyze and proactively identify possible ways to attack a 
software component. Both legal (e.g., a registered user) and illegal (e.g., an unregistered user) 
interfaces are examined for vulnerabilities . As amended, claim 1 recites "analyzing by a 
plurality of agents one or more software solutions to identify legal and illegal external interfaces 
thereto . . . wherein for each of said one or more software solutions, at least one separate agent is 
utilized. Similar amendments are made to independent claims 8 and 15. 

Applicant has amended the claims so that they now require at least a one-to-one relationship 
between a software solution begin monitored and an agent (". . . wherein for each of said one or more 
software solutions, at least one separate agent is utilized. 5 ') Support for this amendment can be found 
on page 6, paragraph [001 1] of the application as filed. This allows independent use of agents in a 
distributed system scattered over multiple locations. None of the prior art, taken alone or in 
combination, teaches or suggests such a novel and non-obvious arrangement. In light of the 
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foregoing arguments, the Examiner is respectfully requested to reconsider and withdraw the 
rejections of the claims under 35 U.S.C. §103(a). 



Conclusion 

The present invention is not taught or suggested by the prior art. Accordingly, the Examiner 
is respectfully requested to reconsider and withdraw the rejection of the claims. An early Notice of 
Allowance is earnestly solicited. 

The Commissioner is hereby authorized to charge the RCE filing fee, any additional fees 
associated with this communication to Deposit Account No. 09-0461 . A Petition for extension of 
time is being filed separately, along with authorization to charge the extension fee to Deposit 
Account No. 50-4364. 

Respectfully submitted, 



July 23. 2008 



Date 

SAUL EWING LLP 
Centre Square West 
1500 Market Street, 38 th Floor 
Philadelphia, PA 1 9 1 02-2 1 89 
Telephone: 215 972 7880 
Facsimile: 215 972 4169 
Email: MSimpson@saul.com 



/MarkD. Simpson/ 
Mark D. Simpson 
Registration No. 32,942 
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